bump dependencies

[thumbnail]

Brief

bump dependencies which have a low impact.

QA plan

Author checklist

• [ ] I have QAed the functionality
• [ ] The PR has a reasonably reviewable size and a meaningful commit history
• [ ] I have run the branch formatter and observed no new/significative warnings
• [ ] The build passes
• [ ] I have self-reviewed the PR prior to assignment
• Additionally, I have code-reviewed iteratively the PR considering the following aspects in isolation:
  • [ ] Correctness
  • [ ] Robustness (red paths, failure handling etc)
  • [ ] Test coverage
  • [ ] Spec coverage
  • [ ] Documentation
  • [ ] Security
  • [ ] Performance
  • [ ] Breaking API changes
  • [ ] Cross-compatibility (Clojure/ClojureScript)

Reviewer checklist

• [ ] I have checked out this branch and reviewed it locally, running it
• [ ] I have QAed the functionality
• [ ] I have reviewed the PR
• Additionally, I have code-reviewed iteratively the PR considering the following aspects in isolation:
  • [ ] Correctness
  • [ ] Robustness (red paths, failure handling etc)
  • [ ] Test coverage
  • [ ] Spec coverage
  • [ ] Documentation
  • [ ] Security
  • [ ] Performance
  • [ ] Breaking API changes
  • [ ] Cross-compatibility (Clojure/ClojureScript)